{"affected":[{"defaultStatus":"unaffected","product":"Edito CMS","source":"CNA: CERT-PL","vendor":"Edito","versions":[{"lessThan":"5.10.2607","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-59074","cwes":["CWE-347"],"description":"Edito CMS is vulnerable to improper cryptographic signature verification in the JWT refresh logic. An authenticated low-privilege user can submit self-crafted​ ​JWT​ containing​ ​an existing user​ ​identifier and, due to the lack of signature validation,​​  obtain​ ​a ​​valid,​​ fully-signed​​ session ​​token​​ for​​ any ​​account ​​in​ ​the​ ​system. This allows the attacker to impersonate any user, including administrators.\nThis issue was fixed in version 5.10.2607.  Hotfixes for older versions (5.8) have also been released.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.7,"severity":"high","source":"CNA: CERT-PL","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1794554781814,"publishedAt":1794554781814,"references":[{"source":"CNA: CERT-PL","tags":["third-party-advisory"],"url":"https://cert.pl/posts/2026/11/CVE-2026-59074"},{"source":"CNA: CERT-PL","tags":["product"],"url":"https://www.edito.pl/"}],"remediation":[],"revision":"1aad223a1b4e5a7097f08bc7ccd709d6377ea847090497eceb502dae23d9b71e","sources":[{"modifiedAt":1794554781814,"name":"CNA: CERT-PL","retrievedAt":1794557315276,"url":"https://www.cve.org/CVERecord?id=CVE-2026-59074"}],"ssvc":null,"status":"published","title":"Improper Cryptographic Signature Verification in Edito CMS","updatedAt":1794557315276}